Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/T9QaLRfHlchJjXC0dirYs5J0krw.roa
File:                     T9QaLRfHlchJjXC0dirYs5J0krw.roa (raw, json)
Hash identifier:          qrksfONL+9SyB96Fu+tATe7XDca2rqnVEqR57uhle78=
Subject key identifier:   4F:D4:1A:2D:17:C7:95:C8:49:8D:70:B4:76:2A:D8:B3:92:74:92:BC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0156
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/T9QaLRfHlchJjXC0dirYs5J0krw.roa
Signing time:             Tue 30 May 2023 17:32:28 +0000
ROA not before:           Tue 30 May 2023 17:32:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4FD41A2D17C795C8498D70B4762AD8B3927492BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bd:79:00:9f:57:14:20:c7:97:ef:4c:74:49:
                    a9:1f:30:8c:4e:f1:2a:9f:ba:b2:d9:3b:63:88:b8:
                    8a:6a:a3:51:97:59:fb:05:eb:49:5f:68:d6:16:f3:
                    b6:02:cf:72:c5:ca:41:66:8f:a9:1b:8b:bc:e6:d7:
                    a4:bb:4e:65:c0:d6:cf:70:e5:90:c1:13:7b:84:93:
                    b1:90:9e:7c:1d:7e:81:7b:40:42:26:98:d0:17:14:
                    26:9b:ec:53:c9:30:30:0d:7e:bf:c4:0d:42:b8:c1:
                    71:5a:0f:d8:33:1e:ae:c2:bd:7b:77:a8:04:89:f9:
                    f7:85:47:0f:9e:18:62:2a:0b:59:66:90:2a:8f:d6:
                    c8:09:29:7d:91:bf:e0:20:79:a5:79:40:45:09:00:
                    02:e7:28:75:76:12:38:cd:bd:ef:55:77:54:5e:bb:
                    3d:74:8a:32:5c:5e:69:38:1e:74:91:5a:9a:d2:66:
                    fc:f2:c3:7f:e1:aa:bf:fd:b9:eb:c5:32:56:8f:be:
                    b5:3a:c7:45:3c:3e:79:b0:4d:93:5b:22:32:e7:2f:
                    37:08:b7:eb:7e:3c:aa:a2:be:b5:ca:d4:00:25:bd:
                    50:78:10:b2:1a:77:ca:b7:10:de:95:4f:05:78:96:
                    20:c5:17:ba:99:99:8d:1d:de:f3:0d:7c:72:12:be:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D4:1A:2D:17:C7:95:C8:49:8D:70:B4:76:2A:D8:B3:92:74:92:BC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/T9QaLRfHlchJjXC0dirYs5J0krw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:9f:0b:65:8a:0c:7f:c9:9e:29:76:2d:bd:60:bc:21:f0:
         16:91:31:e5:8a:09:b5:e9:14:2b:9b:72:3b:29:fb:41:c8:44:
         1f:50:6a:25:73:4c:a0:83:c2:7d:47:fc:d3:6b:0c:98:9d:b7:
         a9:2f:d5:a5:16:af:f1:dd:f9:fd:4b:25:5a:a1:45:be:af:99:
         00:bd:8a:3f:0b:71:c5:8e:d4:1b:09:96:3a:56:38:6c:05:e5:
         f7:20:78:3d:3d:62:5f:7a:7c:e2:c1:0c:88:b2:44:c7:70:4b:
         47:27:49:e2:f8:ad:b6:0c:8b:49:95:47:1b:0c:05:3a:db:1b:
         3a:8e:03:cf:80:a9:ec:4c:2e:b1:e6:0a:eb:51:f0:85:68:c9:
         89:41:b1:58:ce:4f:25:a2:56:b1:a8:e3:0e:f5:ba:fc:21:cb:
         d9:61:ba:d9:28:f4:24:cb:96:a4:4b:c8:98:8a:f0:99:e1:ab:
         7d:a7:3e:7f:3d:08:48:65:09:15:1e:22:f2:b9:ae:d5:70:be:
         eb:98:fd:65:e7:61:f2:f4:3b:3e:7b:3f:32:62:0e:bf:46:58:
         ea:bd:37:a5:1c:7e:db:a9:5d:79:82:9c:59:dd:f5:8e:82:71:
         e1:91:a5:6c:4c:d1:2f:ed:71:af:d7:58:04:08:a3:82:d4:b7:
         e7:12:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org